QwikSec

Security Database

CVE

CWE

Training

CVE-2016-9192

Published: Dec 14, 2016

Modified: Aug 6, 2024

PUBLISHED

Description

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. More Information: CSCvb68043. Known Affected Releases: 4.3(2039) 4.3(748). Known Fixed Releases: 4.3(4019) 4.4(225).

Vendor	Product	Versions
n/a	Cisco AnyConnect Secure Mobility Client	affected `Cisco AnyConnect Secure Mobility Client`

References

https://github.com/serializingme/cve-2016-9192

x_refsource_MISC

https://github.com/nettitude/PoshC2/blob/master/Modules/CVE-2016-9192.ps1

x_refsource_MISC

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-anyconnect1

x_refsource_CONFIRM

vdb-entry

x_refsource_SECTRACK

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.